
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: kE1H0MRYNZoHs+EoK2Gj1byZr8el1p8sQOMalN6v0vE=
Subject key identifier: 47:62:90:76:93:01:47:7A:50:7C:2F:CF:09:F1:9E:14:F0:60:84:BD
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019875D1B8F93C5B75CFE3E8E1DAD65306A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: F6
Signing time: Mon 04 Aug 2025 16:02:15 +0000
Manifest this update: Mon 04 Aug 2025 16:02:15 +0000
Manifest next update: Tue 05 Aug 2025 16:02:15 +0000
Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: l2IiEgv/uyQ/9W1Es2wdcIaRXlnuhXfiazd2ekxpuvE=)
2: pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa (hash: MiX/u7zxhzpsdUN3cx+sdMgoTiE427DJRykzUPzL3BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:b8:f9:3c:5b:75:cf:e3:e8:e1:da:d6:53:06:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Aug 4 16:02:15 2025 GMT
Not After : Aug 5 16:02:15 2025 GMT
Subject: CN=476290769301477a507c2fcf09f19e14f06084bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:86:09:0e:e5:62:20:45:ba:27:b5:5c:88:
9e:f3:fa:58:3c:a9:9a:3b:5d:b4:f7:7f:85:3a:94:
d3:8c:b1:3e:4f:2d:e0:ed:9b:74:30:2c:4b:17:3c:
4e:24:c4:18:4b:f0:8a:34:43:a3:a0:da:00:58:e1:
1b:5f:d4:c1:4c:8e:30:6f:d2:84:b5:d3:e5:a8:4f:
a2:9e:8b:b1:71:07:61:84:92:45:1c:3d:44:02:10:
15:e9:21:76:f6:c0:2d:7f:98:b0:86:1c:95:68:de:
06:cb:d7:20:a5:11:0e:f0:74:43:6c:19:56:f5:0d:
a6:cb:4c:a6:31:e2:9b:ff:b7:da:8c:1d:55:f8:8f:
1b:d8:8e:9a:20:0c:3a:48:29:9b:d2:ea:b0:25:58:
37:fd:7d:57:2a:f5:a7:d8:fc:c7:5a:2e:c9:ac:f9:
34:bb:d4:65:6e:bf:51:9a:51:94:20:54:d1:19:98:
01:e8:6c:ce:f6:d3:4f:e6:ab:78:51:d6:1d:d8:8f:
91:01:1f:8f:6e:2b:0a:2f:b9:70:08:7a:a2:3b:a9:
67:7f:f9:b5:48:f7:e7:b6:fb:e6:43:d3:92:8c:d4:
9d:37:c3:9a:20:3b:7f:1a:30:5d:4c:45:e1:5d:9e:
a9:d0:1e:84:40:73:a7:18:73:9b:d4:f7:2e:5f:75:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:62:90:76:93:01:47:7A:50:7C:2F:CF:09:F1:9E:14:F0:60:84:BD
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:c4:f1:24:9b:e3:27:0e:9b:f5:34:d4:bc:91:2a:e3:9a:63:
82:e9:28:4c:5e:43:97:8e:5f:c8:37:b5:58:1e:9b:3a:2e:1f:
2b:4c:cf:a8:8a:82:d0:d2:c6:c7:f6:63:75:36:47:92:b7:b0:
4f:9d:00:af:c4:fb:80:5a:d6:12:f3:c1:8c:c5:e6:d2:e0:97:
09:82:7d:99:e5:76:26:d8:61:43:e2:4d:f9:ee:38:c3:03:19:
86:71:a9:22:a2:6b:d5:d6:12:44:52:16:f8:88:56:a7:1e:f8:
f8:fe:e1:9b:e3:6c:a2:85:d9:9b:41:8f:50:3f:52:98:44:8d:
6e:6c:96:f5:07:37:1d:77:7c:dc:29:90:84:80:d5:94:c4:43:
eb:1d:ab:06:99:79:c6:be:f4:ff:2f:37:3b:2a:6a:5e:21:cc:
09:8f:8d:9e:9f:fc:8e:0e:d2:57:3d:fe:28:cb:ad:6a:9e:29:
6a:54:c0:2f:c8:0d:8f:15:ba:a3:3d:eb:c5:cf:5c:d2:3d:d0:
9c:bc:3e:0e:57:85:00:b7:3d:34:a1:25:60:38:f6:e9:63:51:
85:80:35:8f:d4:25:24:4d:0f:fb:e7:44:dc:2c:ac:7a:6f:38:
da:b7:d0:3c:8d:b6:70:c1:94:6b:d6:f6:70:37:aa:39:ff:e3:
21:55:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:44:33 2025 by rpki-client